Privacy Policy
Last updated: June 7, 2026
This Privacy Policy explains how LegiCycle (“LegiCycle,” “we,” or “us”) collects, uses, discloses, and protects personal information when you use our legislative-intelligence platform (the “Service”). It is intended to support compliance with the EU/UK GDPR and the California Consumer Privacy Act (CCPA/CPRA), among other laws.
1. Information we collect
- Account & identity data - your name, work email, and authentication identifiers, managed through AWS Cognito.
- Content you provide - bill drafts, research briefs, policy intents, chat messages with the AI assistant, and notes.
- CRM data - information you record about contacts and stakeholders, which may include third parties’ names, email addresses, phone numbers, districts, and free-text notes.
- Usage & device data - log data, request metadata, and a session cookie used to keep you signed in.
2. How we use information
We use personal information to provide and operate the Service, authenticate users, generate and improve AI-assisted drafting and research, send transactional notifications you request, secure the platform, and comply with legal obligations. Our legal bases under GDPR include performance of a contract, our legitimate interests in operating and securing the Service, and your consent where required.
3. Service providers and subprocessors
We share personal information with vendors who process it on our behalf under contract. The categories below reflect our current subprocessors:
| Subprocessor | Purpose | Data shared |
|---|---|---|
| Anthropic (Claude) | AI drafting & assistant responses | Prompts, chat history, draft/research content you submit |
| Perplexity | AI research & analysis | Chat content and draft bill text used to ground answers |
| Amazon Web Services (Cognito, Bedrock, RDS, S3) | Authentication, embeddings, hosting & storage | Account identifiers; content for retrieval/embeddings; stored data |
| Resend | Transactional email | Recipient email address and notification content |
We do not sell personal information. We disclose information when required by law or to protect rights, safety, and security.
4. International transfers
Our providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.
5. Data retention
We retain personal information for as long as your account is active and as needed to provide the Service, then for a limited period to meet legal, accounting, or security requirements. Backups are retained on a rolling basis and purged on a defined schedule.
6. Your rights
Depending on your jurisdiction, you may have the right to access, correct, delete, export, or restrict processing of your personal information, and to object to certain processing or withdraw consent. California residents have the rights to know, delete, correct, and to opt out of “sharing,” and not to be discriminated against for exercising them. To exercise any right, contact us at the address below. We will verify your request before acting on it.
7. Security
We use technical and organizational safeguards including encryption in transit (TLS) and at rest (KMS), network isolation, and access controls. No method of transmission or storage is completely secure.
8. Cookies
We use only strictly necessary cookies required to operate the Service — specifically, secure, HTTP-only session cookies that keep you signed in. These are exempt from consent requirements because the Service cannot function without them. We do not use advertising, analytics, or third-party tracking cookies, so no cookie-consent banner is presented. If we introduce non-essential cookies in the future, we will request your consent first.
9. AI-generated content
The Service uses large language models to generate drafts and research. AI output may be inaccurate and is not legal advice. See our Terms of Service for important limitations.
10. Changes
We may update this Policy and will revise the “Last updated” date above.
11. Contact
Questions or privacy requests: privacy@legicycle.ai.